CVE-2010-4235

Published: Apr 4, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

Affected (10)

Products: Realnetworks: Helix Server, Helix Mobile Server

Realnetworks

2 products

Helix Server

Helix Mobile Server

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Realnetworks Helix Server	Version 12.0.0
Realnetworks Helix Server	Version 12.0.1
Realnetworks Helix Server	Version 13.0.0
Realnetworks Helix Server	Version 13.1.1
Realnetworks Helix Server	Version 14.0.0
Realnetworks Helix Server	Version 14.0.1

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Realnetworks Helix Mobile Server	Version 12.0
Realnetworks Helix Mobile Server	Version 13.1.1
Realnetworks Helix Mobile Server	Version 14.0.0
Realnetworks Helix Mobile Server	Version 14.0.1